PT-2025-10085
CVE-2025-1887
·
Published
2025-03-07
·
Updated
2025-03-08
Description by
CVSS 4.0
7.1
HighMetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
Sage 200 Spain versions prior to 2025.35.000
Description
The issue allows an authenticated attacker with administrator privileges to obtain NTLMv2-SSP Hash by changing any of the paths to a UNC path pointing to a server controlled by the attacker.
Recommendations
For versions prior to 2025.35.000, update to version 2025.35.000 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾